From: Robert Dober <robert.dober@...>
Date: 2006-08-18T22:03:45+09:00
Subject: Re: Secure telnet and ftp?

------=_Part_4638_17385225.1155906223664
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On 8/18/06, Hal Fulton <hal9000@hypermetrics.com> wrote:
>
> I'm rather ignorant of SSL and ssh... but I'm wishing
> for a "compatibility" layer of some kind so that I
> could use the old telnet and ftp interfaces (which I
> know) but do it securely.
>
> In other words, something like:
>
>    require 'ssh-compat'
>
>    SSH::Compat.setup(*whatever) do
>      # ...whatever...
>    end
>
>    # Now just use Net::FTP and Net::Telnet
>    # "just as if" they were the originals
>
>    # Blah blah blah...
>    # all legacy code remains unchanged
>
>    SSH::Compat.quit    # I don't mind some "teardown"
>                        # if it's needed
>
>
> Is this practical/reasonable?
>
> Or is it Just As Easy to use the real secure ftp
> and ssh stuff?


Hmm I am afraid there is no ideal solution for your problem
Did you hear of Net:SSH yet? Seems nice but I did not try it or hear from i=
t
yet.
http://net-ssh.rubyforge.org/
Anyway the online documentation is very good and should not give you too
many problems.
I think it is time to start forgetting about ftp and telnet.
The most problematic issue is of course the caveats of passphrase less keys
or ssh-agent security problems.
As far as I know there is no way around.
However using ssh/sftp with a key without passphrase is still a bunch bette=
r
than using telnet/ftp.

It all depends on your exact application context. Maybe you can setup a use=
r
without a login shell to use your passphrase less key.
Take care that it is not readable for any other user.

I know it is not exactly what you asked for but as you got no answer yet, I
thaught this might be helpfull.

Cheers
Robert

Thanks,
> Hal
>
>


--=20
Deux choses sont infinies : l'univers et la b=EAtise humaine ; en ce qui
concerne l'univers, je n'en ai pas acquis la certitude absolue.

- Albert Einstein

------=_Part_4638_17385225.1155906223664--